Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Advertisements

g2i2r4

Posted 23 June 2005 - 07:00 AM

g2i2r4

retired HiJack Helper

Retired Staff

5,080 posts

Welcome springazurem to Geeks to Go!

You have a nice collection there. It will take a few runs to remove this.

Please download PeperFix from here:http://downloads.sub...rg/PeperFix.exeSave it to the desktop and run it. Click "Find and Fix" to scan your system for the Peper trojan, and allow PeperFix to remove all infected files. Restart your computer if prompted.

***

Download LQfiz by Miekemoes.Unzip it to your desktop.Don't use it yet.

***

Next, please reboot your computer in Safe Mode by doing the following:1) Restart your computer2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.3) Instead of Windows loading as normal, a menu should appear4) Select the first option, to run Windows in Safe Mode.

*Memory*Startup Folders*Drive - All Local Drives*Folder - then click "browse" to change the directory to C: (default is C:\Windows)*Registry*System Folders*Services*Include Sub-Directory*Scan All Files

Please make sure ALL of these are checked, then press the scan button. This will take hours to complete.

**NOTE*** Sometimes MWav will pause and it appears to be finished, but it isn't done. Just let it run.

Highlight the portion of the scan that lists infected items and hold CTRL + C to Copy then paste it here. The whole log with be extremely big so there is no way to copy the whole thing. I just need the infected items list.

***

Open HijackThisGo to ‘config’Go to ‘misc tools’Press the button ‘open uninstall manager’Press the button 'save list'. It will open a Notepad file. Place the content of that file here in your answer please.

springazurem

Posted 04 July 2005 - 06:35 AM

springazurem

New Member

Topic Starter

Member

3 posts

Thanks g2I2r4 for your help and sorry for it taking me so long. Ive run everything you told me to run. I dont know if any of that was supposed to fix anything but for the record my pop-ups are it seems even worse.

I dont understand what part of the 'escan' log you want me to post. I cant tell whats infected or not. Again thanks so much for your help.

g2i2r4

Posted 04 July 2005 - 01:53 PM

g2i2r4

retired HiJack Helper

Retired Staff

5,080 posts

Search the logfile 'mwav.log' in directory 'c:\bases'. Open the logfile with aneditor. Look for the files which are tagged as "virus" (of "infected").Copy&paste all these files tagged as "virus" (or "infected") in a new document.---> post every file mwavscan tagged as "virus" (of "infected")---> and the names of the virusses.

=>Total Number of Files Scanned:=>Total Number of Virus(es) Found:=>Total Number of Disinfected Files:=>Total Number of Files Renamed:=>Total Number of Deleted Files:=>Total Number of Errors:***** Scanning complete. *****

***

Open HijackThisGo to ‘config’Go to ‘misc tools’Press the button ‘open uninstall manager’In the list find:The ABI Network- A Division of Direct RevenuePress ‘delete this entry’.press 'back' and 'scan'.

Post me that log too and we will take on the next infection.

EDIT:As there has been no reply from the original poster for more than two weeks this topic is now closed.

If you are the original poster and still need assistance, please send me a PM.